12 matches found
alamy.com XSS vulnerability
Open Bug Bounty ID: OBB-245504 Description| Value ---|--- Affected Website:| alamy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cbn.com XSS vulnerability
Vulnerable URL: https://www.cbn.com/Auth/social/Logon.aspx?ParentUrl=alert'OPENBUGBOUNTY';...
InstantASP 4.1 Logon.aspx SessionID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...
Immediacy .NET CMS 5.2 Logon.ASPX Cross-Site Scripting Vulnerability
No description provided by source...
CVE-2007-0302
Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...
CVE-2007-0302
CVE-2007-0302 affects InstantASP 4.1.0 with multiple cross-site scripting (XSS) flaws. An attacker can inject arbitrary script/HTML via (1) SessionID to Logon.aspx and (2) Username and (3) Update to Members1.aspx, enabling web-script injection. The NVD CVSS2 base score is 6.8 (MEDIUM) with networ...
CVE-2007-0302
Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...
InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting
InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issu...
InstantASP 4.1 - 'Logon.aspx?sessionid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...
CVE-2006-5853
Cross-site scripting XSS vulnerability in logon.aspx in Immediacy CMS Immediacy .NET CMS 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is returned to the client in a lang cookie...
XSS in InstantForum.NET v4.1.1
Advisory: InstantForum.NET v4.1.1 Home Page: http://instantasp.co.uk/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: Logon.aspx, Search1-2-1.aspx, InsertAttachments.aspx...